9899 matches found
CVE-2013-0138
BitZipper 2013 before Update 1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted ZIP archive...
CVE-2013-0138
CVE-2013-0138 affects BitZipper 2013 prior to Update 1 (version 2013.13.4.16). A crafted ZIP archive can trigger a memory corruption vulnerability, allowing remote code execution or a denial of service. Remediation is to update to BitZipper 2013 Update 1 or later. CERT/CC notes mitigation options...
icedtea security update
CentOS Errata and Security Advisory CESA-2013:0753 Updated icedtea-web packages that fix two security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...
Fedora Update for libarchive FEDORA-2013-4522
Check for the Version of libarchive OpenVAS Vulnerability Test Fedora Update for libarchive FEDORA-2013-4522 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...
[SECURITY] Fedora 17 Update: libarchive-3.0.4-3.fc17
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
[SECURITY] Fedora 18 Update: libarchive-3.0.4-4.fc18
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
[SECURITY] Fedora 17 Update: mingw-libarchive-3.0.4-4.fc17
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
[SECURITY] Fedora 18 Update: mingw-libarchive-3.0.4-4.fc18
Libarchive is a programming library that can create and read several differ ent streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...
Fedora Update for mingw-libarchive FEDORA-2013-4592
Check for the Version of mingw-libarchive OpenVAS Vulnerability Test Fedora Update for mingw-libarchive FEDORA-2013-4592 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...
HP Intelligent Management Center mibFileUpload Servlet Unrestricted File Creation
Added: 04/05/2013 CVE: CVE-2012-5201 BID: 58385 OSVDB: 91026 Background HP Intelligent Management Center IMC, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. Problem HP IMC 5.1 E0202 and earlier i...
HP Intelligent Management Center mibFileUpload Servlet Unrestricted File Creation
Added: 04/05/2013 CVE: CVE-2012-5201 BID: 58385 OSVDB: 91026 Background HP Intelligent Management Center IMC, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. Problem HP IMC 5.1 E0202 and earlier i...
Backupbuddy 2.2.4 Sensitive Data Exposure
Backupbuddy - sensitive data exposure in importbuddy.php "the premiere WordPress backup plugin to backup, restore and move WordPress" http://ithemes.com/purchase/backupbuddy/ known versions affected: v1.3.4, v2.1.4, v2.2.25, v2.2.28, v2.2.4, likely other versions also impact: access to wordpress...
IRIS Citations Management Tool - (Authenticated) Remote Command Execution
IRIS Citations Management Tool - Authenticated Remote Command Execution Here is a bug that I finally found time to write about :- https://infosecabsurdity.wordpress.com/2013/02/09/iris-citations-management-tool-post-auth-remote-command-execution/ The attached contains my mini framework, exploit a...
Apache Tomcat Manager Application Deployer Authenticated Code Execution
This module can be used to execute a payload on Apache Tomcat servers that have an exposed "manager" application. The payload is uploaded as a WAR archive containing a jsp application using a PUT request. The manager application can also be abused using /manager/html/upload, but that method is no...
Java Applet Method Handle Remote Code Execution
This module abuses the Method Handle class from a Java Applet to run arbitrary Java code outside of the sandbox. The vulnerability affects Java version 7u7 and earlier. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework...
SuSE Update for ClamAV openSUSE-SU-2012:0833-1 (ClamAV)
Check for the Version of ClamAV OpenVAS Vulnerability Test $Id: gbsuse201208331.nasl 8295 2018-01-05 06:29:18Z teissa $ SuSE Update for ClamAV openSUSE-SU-2012:0833-1 ClamAV Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program ...
openSUSE: Security Advisory for ClamAV (openSUSE-SU-2012:0833-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Directory traversal
Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted archive file...
CVE-2012-5171
CVE-2012-5171 affects BeZIP before 3.10 from Be Graph Co., Ltd. A directory traversal vulnerability in the extraction process allows a crafted archive to create or overwrite arbitrary files on a affected system. The root cause is improper validation of archive paths during extraction, enabling ac...